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AMENDMENTS TO THE CLAIMS 

Please add or amend the claims to read as follows, and cancel without 
prejudice or disclaimer to resubmission in a divisional or continuation application 
claims indicated as cancelled: 

1. (Amended) A method for filtered application-to-application communication of 
applications running on computing pl atforms including an operating system kernel, 
said method comprising: 

providing a communi cation interface to an application, wherein the 
communication interface bypasses a substantial portion of the operating system 
kernel : 

filtering application data received from a process of said application according to 
a predetermined policy; and 

providing said filtered application data directly to communication hardware by; 
bypassing a substantial portion of the operati ng system kernel, 

2. (Original) The method of claim 1 further comprising: 

verifying the identity of said application prior to providing said filtered 
application data. 

3 . (Original) The method of claim 2 further comprising: 

sending at least one security token. 

4. (Original) The method of claim 1 further comprising: 

verifying the identity of a machine participating in said process prior to providing 
said filtered application data. 

5. (Original) The method of claim 4 further comprising: 
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sending at least one security token. 

6. (Original) The method of claim 1, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel network 
interface card having direct user-to-hardware access. 

7. (Original) The method of claim 6, wherein said multi-channel network interface card 
is an InfiniBand card, 

8. (Amended) A method for filtered application-to-application communication of 
applications running on computing platfo rms including an operating system fcernel, 
said method comprising: 

providing a communication interface to an application, wherein — the 

communication interface bypasses a substantial portio n of the operating system 
kernel ; 

filtering application data received from a process of said application; 
sending an authentication request to an authentication service; 
receiving authentication information; and 

providing said filtered application data directly to communication hardware_by_ 
bypassing a substantial portion of the oper ating system kernel. 

9. (Original) The method of claim 8 further comprising: 

verifying the identity of said application prior to providing said filtered 
application data, 

10. (Original) The method of claim 9 further comprising: 

sending at least one security token 

1 1 . (Original) The method of claim 8 further comprising: 
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verifying the identity of a machine participating in said process prior to 
providing said filtered application data. 

12. (Original) The method of claim 1 1 further comprising: 

sending at least one security token 

13. (Original) The method of claim 8, wherein providing said filtered application data 
comprises providing said filtered application data directly to a multi-channel network 
interface card having direct user-to-hardware access. 

14. (Original) The method of claim 1 3, wherein said multi-channel network interface card 
is an InfiniBand card. 

15. (Amended) A system for filtered application-to-application communication of 
applications running on computing platforms including an oper ating system kernel. 
said method comprising: 

multi-channel communication hardware; and 

at least one application interface and filter operative to provide filtered data from 
an application process directly to said multi-channel communication hardware_by 
bypassing a substantial portion of the operating system kernel . 

16. (Original) The system of claim 15, wherein said communication hardware is a multi- 
channel network interface card having direct u$er-to -hardware access. 

17. (Original) The system of claim 16, wherein said multi-channel network interface card 
is an InfiniBand card. 

18. (Amended) A system for filtered application-to-application communication of 
applications running on computing platforms including an operating system kernel, 
said method comprising: 
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multi-channel communication hardware; 

at least one application interface and filter operative to provide filtered data from 
an application process directly to said multi-channel communication hardware by 
bypassing a substantial portion of the operating system kernel ; and 

at least one authentication service adapted to determine whether said application 
process is genuine and/or whether at least one machine participating in said 
application process is genuine. 

19. (Original) The system of claim 18, wherein said communication hardware is a multi- 
channel network interface card having a direct user-to-hardware access, 

20. (Original) The system of claim 19, wherein said multi-channel network interface card 
is an InfiniBand card. 
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